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Top Stories 

• Three subsidiaries of Potash Corporation of Saskatchewan agreed to pay a $1.3 million 
civil penalty to resolve allegations that the companies violated the Clean Air Act when they 
modified eight U.S. fertili z er production facilities in ways that released excess sulfur 
dioxide. - U.S. Environmental Protection Agency (See item 9) 

• Authorities charged a man who operated pain clinics in south Florida and Georgia, and a 
co-conspirator, for allegedly taking part in a scheme to distribute over 1 million 
prescription pain pills in southeastern Kentucky. - Lexington Herald-Leader (See item 15) 

• U.S. and European law enforcement agencies undertook joint action against several 
underweb marketplaces resulting in 17 arrests and the takedown of over 410 hidden 
services. - Help Net Security (See item 29) 

• Home Depot officials disclosed November 6 that an investigation into a previous breach of 
the company’s payment data systems revealed that 53 million email addresses of customers 
in the U.S. and Canada were also compromised. - Help Net Security (See item 35) 
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Energy Sector 

1. November 7, Fresno Bee - (California) Porterville police: Thieves steal $20K in 
copper from Edison substation. Police in Porterville are searching for 2 suspects who 
stole 7,000 to 8,000 feet of copper wire worth $20,000 from the Southern California 
Edison Porterville substation October 28. 

Source: http://www.fresnobee.com/2014/ll/07/4222455 porterville-police-thieves- 
steal.html 

[ Return to top ] 

Chemical Industry Sector 

See item 9 
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Nuclear Reactors, Materials, and Waste Sector 

2. November 6, Reuters - (Illinois) Honeywell misclassified Illinois uranium plant 
leak, regulators say. The U.S. Nuclear Regulatory Commission (NRC) found in a 
November 4 report that the Honeywell International Inc., facility in Metropolis, Illinois, 
misclassified an October 26 uranium hexafluoride leak, which resulted in the NRC not 
receiving appropriate notification. The NRC found that the company notified local 
authorities and the misclassification did not affect how the leak was handled, and are 
continuing to investigate the incident and response. 

Source: http://www.reuters.com/article/2014/ll/06/honeywell-intl-uranium- 
idlNL 1 N0SW2BR20 141106 

3. November 6, MLive.com - (Michigan) Lake Michigan nuclear plant reactor will 
remain offline until storm passes. The operators of the D.C. Cook Nuclear Plant in 
Bridgman stated that the No. 2 reactor at the plant would remain shut down and the No. 
1 reactor at reduced power until a storm system over the Great Lakes region November 
6 passes. Both reactors were shut down November 1 after rough water conditions 
affected cooling water intake screens. 

Source: 

http://www.mlive.com/weather/index.ssf/2014/ll/storm nuke plants lake michiga.ht 
ml 
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Critical Manufacturing Sector 

4. November 6, Reuters - (National) Facing U.S. safety probe, Honda expands air bag 
recall. Honda upgraded a safety campaign for vehicles equipped with airbag inflators 
manufactured by Takata to a formal recall, adding an undisclosed number of model 
year 2001-2006 vehicles to previous recalls caused by the same component. Vehicles 
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affected include model year 2003-2005 Honda Accord, Pilot, and Acura MDX vehicles 
as well as model year 2001-2005 Honda Civic, 2002-2005 CR-V, 2002-2004 Odyssey, 
2003-2004 Element, 2006 Ridgeline, and 2005 Acura RL vehicles sold or registered in 
high-humidity States and territories. 

Source: http ://w w w .reuter s . com/article/20 14/11 /07 /us -takata-honda- 
idUSKBN0IQ2Q620141 107 

5. November 6, U.S. Department of Labor - (Wisconsin) Bremer Manufacturing Co. 
cited in death of worker at Elkhart Lake, Wisconsin, aluminum foundry. 
Aluminum castings manufacturer Bremer Manufacturing Co. Inc., was cited by the 
Occupational Safety and Health Administration for 1 willful, 1 repeat, and 1 serious 
health violation at its Elkhart Lake facility following an inspection prompted by the 
death of a worker. Proposed fines totaled $81,900. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26964 
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Defense Industrial Base Sector 

See item 17 
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Financial Services Sector 

6. November 6, U-T San Diego - (California) Bearded Bandit has new beardless look. 
The FBI stated that a suspect known as the Bearded Bandit is suspected in the 
November 6 robbery of a Chase Bank branch in Vista, the third bank robbery in the San 
Diego area linked to the suspect. The suspect acquired the Bearded Bandit moniker in 
previous robberies but appeared in images of the November 6 robbery without a beard. 
Source: http://www.utsandiego.com/news/2014/nov/06/bearded-bandit-robbery-bank- 
fbi/ 

For additional stories, see items 29 and 35 



[ Return to top ] 

Transportation Systems Sector 

7. November 7, KWU 5 Las Vegas - (Nevada) Fire on FedEx flight forces landing in 
Vegas. A FedEx flight from Ontario, California to Memphis, Tennessee, made an 
emergency landing at McCarran International Airport in Las Vegas after a fire was 
reported in the cargo area of the jet. There were no injuries among the three people 
onboard and no evidence of a fire was found. 

Source: http://www.fox5vegas.com/storv/27325980/official-fire-on-fedex-flight-forces- 
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landing-in-vegas 



For another story, see item 40 
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Food and Agriculture Sector 

8. November 7, Topeka Capital- Journal - (Kansas) Jefferson County man dies in grain 
bin accident. A Jefferson County man died before emergency crews could retrieve him 
after he fell into a grain bin on his Valley Falls farm November 6. 

Source: http://cionline.com/news/2014-ll-07/iefferson-county-man-dies-grain-bin- 
accident 

9. November 6, U.S. Environmental Protection Agency - (Florida; North Carolina; 
Louisiana) Three subsidiaries of the world’s largest fertilizer producer to reduce 
harmful air emissions at eight production plants. Three subsidiaries of Potash 
Corporation of Saskatchewan (PCS) agreed to pay a $1.3 million civil penalty to 
resolve allegations brought forth by the U.S. Environmental Protection Agency and the 
U.S. Department of Justice that the companies violated the Clean Air Act when they 
modified eight U.S. fertilizer production facilities in ways that released excess sulfur 
dioxide. The companies will also spend an estimated $50 million to reduce air 
emissions at production plants in White Springs, Florida; Aurora, North Carolina; and 
Geismar, Louisiana. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/4e642 
eb4c6e05 3 5f8 5 25 7 d8 80049c0f8 

10. November 6, U.S. Food and Drug Administration - (Washington; Oregon) Schwartz 
Brothers Bakery issues allergy alert on undeclared milk in “Everything Bagels”. 
The U.S. Food and Drug Administration announced November 6 that Seattle -based 
Schwartz Brothers Bakery issued a recall for its “Everything Bagels” products due to 
undeclared milk. The product was distributed in 4-pack plastic bags to QFC stores in 
Washington and Oregon between October 9 and November 5. 

Source: http://www.fda.gov/Safety/Recalls/ucm422236.htm 

11. November 6, U.S. Department of Agriculture - (California; Washington) California 
firm recalls pork products due to misbranding and undeclared allergens. The Food 
Safety and Inspection Service (FSIS) announced November 6 that CS Best Food Inc., 
recalled about 6,560 pounds of pork blood sausage link products due to undeclared 
wheat and soy caused by misbranding. The products were shipped to retail locations in 
Washington and California. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-ai'chive/archi ve/20 1 4/recall-07 6-201 4-release 
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Water and Wastewater Systems Sector 



12. November 7, WFXT 25 Boston - (New Hampshire) Manchester water main breaks, 
spills 1 million gallons of water. Water service was restored to homes in part of 
Manchester, New Hampshire, November 7 after a water main broke and spilled 1 
million gallons of water, damaging buildings nearby and forcing the evacuation of 
more than a dozen residents. The spill also caused several sinkholes and closed off a 
number of roads. 

Source: http://www.mvfoxboston.com/storv/27323839/manchester-water-rnain-breaks- 
spills-a-million-gallons-of-water 

13. November 6, San Antonio Express-News - (Texas) SAWS reports second big rain- 
related sewer spill. Officials reported that a sewer spill occurred between November 4 
and November 6 from a 27-inch main along Wurzbach Parkway in San Antonio and 
spilled about 137,000 gallons of domestic wastewater due to rainwater infiltration. A 
sewer spill of more than 100,000 gallons also occurred November 4 from a 48-inch 
main on Holbrook Road. 

Source: http://www.mvsanantonio.com/news/environment/article/SAWS-reports- 
second-big-rain-related-sewer-spill-5876650.php 

14. November 6, Los Angeles Times - (California) Sewage spill closes two marinas in 
Huntington Harbour. Two marinas in Huntington Harbour were closed to swimmers 
and divers until further notice after a sewage spill that resulted from a backed-up pipe 
in Westminster discharged about 1,000 gallons of raw sewage into a storm drain system 
that feeds into the harbor November 6. 

Source: http://www.latimes.com/local/lanow/la-me-ln-sewage-spill-huntington- 
harbour-20141 106-story.html 
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Healthcare and Public Health Sector 

15. November 6, Lexington Herald-Leader - (Kentucky; Florida; Georgia) Court records: 
Pain clinic operator distributed more than 1 million pills in southeastern 
Kentucky. Authorities charged a man who operated pain clinics in south Florida and 
Georgia, and a co-conspirator, for allegedly taking part in a scheme to distribute over 1 
million prescription pain pills in southeastern Kentucky, amassing $15 million from 
June 2008 to May 2014. The pair was allegedly part of the plot which involved 
individuals from Kentucky visiting clinics in Florida and Georgia to get prescriptions 
without undergoing real examinations. 

Source: http://www.kentucky.com/2014/ll/06/3525239 court-records-pain-clinic- 
operator.html 

16. November 5, WGHP 8 High Point - (North Carolina) Mount Airy nursing diners 
possibly exposed to hepatitis A. An employee that was diagnosed with hepatitis A 
prompted the Surry County Health and Nutrition Center to warn individuals who dined 
at the Golden Living Center in Mount Airy October 22 of possible exposure and urged 
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visitors to monitor for symptoms. 

Source: http ://myfox8 . com/20 14/11 /05/mount-airy- nursing-home-resident- pos sibl y- 
exposed-to-hepatitis-a/ 

For another story, see item 19 
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Government Facilities Sector 

17. November 7, Reuters - (National) Three charged in U.S. presidential helicopter 
fraud case. Federal prosecutors charged a U.S. Marine Corps officer and two Valour 
LLC defense contractors November 6 for conspiring on a bid to do work for Marine 
Helicopter Squadron One, which is used to transport the U.S. President and vice 
president. The officer was accused of leaking confidential information on the proposed 
bid contract and taking part in a selection board to evaluate bidders after working with 
the contractors to draft a proposal favoring their company. 

Source: http://www.msn.com/en-us/news/crime/three-charged-in-us-presidential- 
helicopter-fraud-case/ar-AA6UB24 

18. November 7, Associated Press - (Idaho) 2 killed in Idaho National Guard copter 
crash. Authorities are investigating after two pilots were killed in an Idaho Army 
National Guard helicopter crash in Boise near the Gowen Field base November 6 
during a training mission. 

Source: http://www.msn.com/en-us/news/us/2-killed-in-idaho-national-guard-copter- 
crash/ar- AA6W cFq 

19. November 6, WRBL 3 Columbus - (Georgia) 300 students and staff to be tested for 
TB at Shaw. The Muscogee County School District announced November 6 that 
roughly 40 employees and 260 students will be tested for tuberculosis at Shaw High 
School after a student tested positive for the disease November 5. 

Source: http://www.wrbl.com/storv/27317392/300-to-be-tested-for-tb-at-shaw 

20. November 6, Pittsburgh Tribune -Review - (Pennsylvania) Uniontown elementary 
school evacuated after septic line backup. Classes resumed November 7 at Ben 
Franklin Elementary-Middle School in Uniontown, Pennsylvania, after students were 
evacuated November 6 due to a septic line backup that affected the first floor. 

Source: http://triblive.com/news/adminpage/7105847-74/ben-franklin-septic 

21. November 6, WSB 2 Atlanta - (Georgia) Students injured in school bus crash. An 
accident involving a school bus that was rear-ended by an SUV in DeKalb County 
caused six students to be transported to an area hospital for evaluation November 6. 
Source: http://www.wsbtv.com/news/news/local/students-iniured-school-bus- 
crash/nh2hB/ 

22. November 6, WHDH 7 Boston - (Massachusetts) 140 get norovirus at South Boston’s 
Condon school. Boston Health officials announced that 10 staff members and 140 
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students at Condon Elementary School in South Boston contracted norovirus beginning 
October 31. Custodial staff cleaned the school November 3 and Boston Health officials 
visited the campus November 4 urging students to watch for symptoms. 

Source: http://www.whdh.com/storv/27287035/highly-contagious-stomach-virus- 
confirmed-at-condon-elem 



23. November 6, WTKR 3 Norfolk - (Virginia) Several students taken to hospital 
following Suffolk school bus accident; other driver issued summons. Sixteen 
students were transported to an area hospital following an accident involving a school 
bus that was rear-ended by another vehicle in Suffolk November 6. 

Source: http://wtkr.eom/2014/l 1/06/godwin-blvd-closed-near-oakland-elementary- 
school-due-to-school-bus-accident/ 

24. November 6, WHNT 19 Huntsville - (Alabama) Russellville High School given ‘all 
clear’ after bomb threat, student charged. Police charged a teenage student in 
connection to a hoax bomb threat made against Russellville High School in Alabama 
that prompted the evacuation of students and staff for 3 hours November 6. 

Source: http://whnt.com/2014/ll/06/russellville-high-school-evacuated-due-to-bomb- 
threat/ 

25. November 6, KMBT 12 Beaumont - (Texas) 10 students with minor injuries in BISD 
bus accident, driver cited for failure to control speed. Ten Pathways Learning 
Center students were transported to an area hospital with injuries following an accident 
involving a Beaumont Independent School District bus that ended up in a ditch at an 
intersection in Beaumont November 6. 

Source: http://www.12newsnow.com/story/27319522/bisd-school-bus-involved-in- 
accident 

[ Return to top ] 

Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

26. November 7, The Register - (International) Belkin flings out patch after Metasploit 
module turns guests to admins. Belkin recently released a patch for its N750 dual- 
band router to close a vulnerability demonstrated in a Metasploit module that could 
allow attackers on guest networks to gain root access. Users were advised to update 
their firmware to close the vulnerability. 

Source: 

http://www.theregister.co.uk/2014/ll/07/belkin flings patch after metasploit module 
turns guests to admins/ 
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27. November 7, Help Net Security - (International) WireLurker: Apple blocks 
Trojanized apps, revokes certificate. Apple stated that it blocked apps identified as 
containing the WireLurker malware for OS X and iOS and revoked the certificate used 
to sign the malware. 

Source: http://www.net-security.org/malware news.php?id=291 1 

28. November 7, Securityweek - (International) Metasploit module released for new 
UXSS vulnerability in Android browser. An independent researcher in coordination 
with Rapid7 identified and reported a universal cross-site scripting (UXSS) 
vulnerability in the default Android browser that could allow an attacker to scrape page 
contents and cookie data. A Metasploit module for the vulnerability was released, and 
although Google fixed the issue September 30 many Android users may not receive the 
fix due to lack of Android version updates. 

Source: http://www.securitvweek.com/metasploit-module-released-new-uxss- 
vulnerability- android-bro wser 

29. November 7, Help Net Security - (International) After Silk Road 2, global law 
enforcement seizes other dark markets. U.S. and European law enforcement agencies 
undertook joint action against several other underweb marketplaces following actions 
against the Silk Road 2.0 marketplace, resulting in 17 arrests and the takedown of over 
410 hidden services. Authorities also seized around $1 million in cash, illegal drugs, 
and precious metals. 

Source: http://www.net-securitv.org/secworld.php ?id=17605 

30. November 6, Softpedia - (International) Cisco patches three out of four buggy small 
business RV series routers. Cisco posted an advisory November 5 stating that three 
vulnerabilities in four routers intended for small business use could allow attackers to 
execute arbitrary commands and upload files to the devices. The company issued 
patches for the RV120W Wireless-N VPN Firewall, RV180 VPN Router, and RV 
180W Wireless-N Multifunction VPN Router, while a patch for the RV220W Wireless 
Network Security Firewall is expected by the end of November. 

Source: http://news.softpedia.com/news/Cisco-Patches-Three-Qut-Qf-Four-Small- 
Business-RV-Series-Routers-464341.shtml 



For additional stories, see items 32 and 35 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



31. November 6, Philadelphia Inquirer - (National) Multistate Comcast outage darkens 
TV screens for Xfinity subscribers. Comcast apologized to users of its XI set-top 
boxes November 6 after some users experienced an outage due to a software update. 
Source: 

http://www.phillv.com/phillv/business/20141107 Multistate Comcast outage darkens 
TV screens for Xfinity subscribers.html 

32. November 5, Lafayette Daily Advertiser - (Louisiana) LUS Fiber victim of Internet 
attack. The director of Lafayette Utilities System (LUS Fiber) stated that disruptions to 
customers’ Internet access November 4 and November 5 in Lafayette were the result of 
an attacker intentionally overwhelming the system. LUS Fiber had also experienced an 
unrelated email server malfunction the week of October 27 that left customers without 
email service for several days. 

Source: http://www.theadvertiser.com/storv/news/local/2014/ll/05/lus-fiber-victim- 
intemet-attack/1 8547439/ 
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Commercial Facilities Sector 

33. November 7, WCAU 10 Philadelphia - (Pennsylvania) Dozens displaced in high-rise 
apartment building fire. Three floors of a Philadelphia apartment building suffered 
smoke and water damaged during a fire that was contained to one unit’s kitchen 
November 7. Dozens of residents were displaced in the incident. 

Source: http://www.nbcphiladelphia.com/news/local/High-Rise-Apartment-Building- 
Fire-281891891.html 



34. November 7, WCAU 10 Philadelphia - (Pennsylvania) Deadly fire at Philly boarding 
house for vets. One resident was killed and 23 others were displaced by a fire at the 
Alliance of Youth Mission Ministries-owned Dillard House boarding home for veterans 
in north Philadelphia November 7. 

Source: http://www.nbcphiladelphia.com/news/local/Philly-Homeless-Shelter-Goes- 
Up-in-Flames-Deadly-Fatal-281891501.html 

35. November 7, Help Net Security - (International) 53M customer email addresses were 
also stolen in Home Depot breach. Home Depot officials disclosed November 6 that 
an investigation into a previously reported breach of the company’s payment data 
systems revealed that 53 million email addresses of customers in the U.S. and Canada 
were also compromised during the attack and officials urged consumers to be on guard 
against phishing scams. The company also reported that hackers used the stolen 
credentials of a third-party vendor to access the company’s point-of-sale (PoS) devices, 
then acquired administrator rights that enabled them to deploy custom-built malware on 
self-checkout systems at the company’s stores in the U.S. and Canada. 

Source: http://www.net-securitv.org/secworld.php ?id=17606 



-9 - 



36. November 6, Cyber cast News Service - (California) Gas leak in Little Italy, 
evacuations in effect. Some businesses and restaurants in the Little Italy area of San 
Diego were evacuated and closed for several hours November 5 while utility crews 
repaired a natural gas line that ruptured when it was inadvertently struck by a 
construction crew working in the area. 

Source: http://www.sandiego6.com/news/local/Gas-leak-in-Little-Italy-Numerous- 
restaurants-condos-and-apartments-affected-28 1672601 .html 

37. November 6, KOAM 7 Pittsburg - (Kansas) Man in custody after bomb scare. Some 
businesses and residents in Parsons, Kansas, were evacuated for more than 7 hours 
November 5 after officers found a suspicious device in a suspect’s vehicle during an 
investigation into a reported domestic disturbance. The evacuation order was lifted 
after the Kansas Highway Patrol Bomb Squad dismantled the device. 

Source: http://www.koamtv.com/storv/27294409/man-in-custody-after-bomb-scare 

38. November 6, WBZ 4 Boston - (Massachusetts) Woman seriously burned in 
Stoughton apartment fire. Authorities are investigating the cause of a November 6 
fire at a Stoughton apartment building that displaced about 57 residents. One resident 
was flown to a local hospital with severe injuries. 

Source: http://boston.cbslocal.eom/2014/l 1/06/woman-bumed-in-stoughton-apartment- 
fire/ 



39. November 5, Atlanta Journal- Constitution - (Georgia) FBI investigating explosive 
device found at Roswell park. Vickery Creek Park in Roswell, Georgia, was closed 
for several hours November 5 while police investigated a suspicious backpack that 
contained explosive materials. The bag was detonated and the park reopened after 
authorities searched and cleared the scene. 

Source: http://www.aic.com/news/news/fbi-investigating-suspicious-device-in- 
roswell/nhzwq/ 

For another story, see item 14 
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Dams Sector 



40. November 5, Chattanooga Times Free Press - (Tennessee) Shipments resume early 
after Chickamauga lock gate repaired. The Chickamauga Lock on the Tennessee 
River reopened to boat traffic sooner than expected November 4 after the U.S. Army 
Corps of Engineers closed the lock October 27 when a gate problem was discovered 
during a routine inspection. 

Source: http://timesfreepress.com/news/2014/nov/05/shipments-resume-earlv-after- 
lock-gate-repaired/ 
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